Privacy Notice

Equilactate is operated by Hyperdata ("Hyperdata", "we", "us"). Hyperdata is the data controller for the personal data described in this notice. You can reach us at info@equilactate.com.

• Account data — your name, email address, and login credentials.
• Service data — the content you enter: horse profiles, health baselines, exercise tests, lactate and heart-rate measurements, and notes.
• Support messages — correspondence when you contact us.
• Usage and device data — IP address, browser and device identifiers, and basic telemetry about how the app is used.

Payment card details are collected and processed directly by Paddle (our Merchant of Record); we never see or store your full card number.

• Providing the service — creating your account, storing your horses and tests, generating reports (performance of our contract with you).
• Security and fraud prevention — protecting accounts and the service (legitimate interest).
• Product improvement — understanding how the app is used to improve it (legitimate interest).
• Customer support — responding to your requests (performance of contract / legitimate interest).
• Legal obligations — records we must keep for tax, accounting, or regulatory reasons.
• Marketing — only with your consent, where required.

• Service providers — hosting, database, and infrastructure providers that process data on our behalf.
• Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, subscription management, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law.

We do not sell your personal data.

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep your data for as long as your account is active and as needed to provide the service. When data is no longer needed, it is deleted or anonymised. Some records may be kept longer where the law requires it (for example, accounting records).

Depending on your country, you may have the right to access, rectify, or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to complain to your data protection supervisory authority. We respond to requests within one month. To exercise any of these rights, contact info@equilactate.com.

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level isolation of each account's records.

We use essential cookies and local storage to keep you signed in and to remember your preferences (such as your speed unit). You can clear cookies and site data in your browser settings at any time.

We use the Google Ads tag (provided by Google) to measure whether our ads lead to account signups. It may process your IP address, browser and device information, the ad click identifier, and the fact that you created an account. We use this only for ad measurement and to help Google optimize our ads; we do not send your email or name to Google. In the EEA, the UK, Switzerland and Canada we ask for your consent first; if you reject, Google receives only limited, cookieless signals. Elsewhere this measurement is on by default. You can change or withdraw your choice at any time via "Cookie settings" in the site footer. Learn how Google uses data at business.safety.google/privacy.

We may update this notice from time to time. Material changes will be highlighted on this page with an updated date.